Benign Download

VirusShare_dadc1c63038c0594e1c23270653c8b14

Dynamically loads script elementCalls JavaScript split()
SHA-2560269100ece685716c05d8157c4ff8ac91e380eba15add59316ed973666a3eedd
MaleculeO(As)H₂(DbPo)

Evidence

Calls JavaScript split() lines 1–19
1(function(){
2var bp = document.createElement('script');
3var curProtocol = window.location.protocol.split(':')[0];
4if (curProtocol === 'https') {
5bp.src = 'https://zz.bdstatic.com/linksubmit/push.js';
⋯14 lines
Hex arithmetic in string operations lines 45–52
45:178… 示按钮|打开方式
46 var configtg='0xffffff|0|0x3FA61F|5|0xffffff|0xC5DDBC|0x000033|2|3|1|_blank';
47 var files = "";
48 var links = "";
⋯4 lines

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.